Hallo habe hier im Forum schon in 2 Themen gelesen, dass Leute Probleme mit diesem Virus haben. bei mir ist es auch so dass auf einigen Websites Wörter zweifach unterstrichen sind.
Ich vermute ich habe mir den Virus versehentlich bei einem angeblichen Adobe flashplayer update eingefangen. die Seite hieß: adobaoo.com seitdem besteht dieses Problem.
ein Avira virencheck bzw. entferner habe ich bereits gemacht aber dieses Problem ist immernoch da. Mein system ist Windows Vista.
Ich hoffe ihr könnt mir helfen.

Hallo und

Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner, sind die mal fündig geworden?

Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520

Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs in CODE-Tags posten!
Relevant sind nur Logs der letzten 7 Tage bzw. seitdem das Problem besteht!



Zudem bitte auch ein Log mit Farbars Tool machen:

Scan mit Farbar's Recovery Scan Tool (FRST)

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

• Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
• Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
• Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
• Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

Habe soeben den Frst Scan gemacht weiß leider nicht genau ob ich noch an die Logs von avira eu-Cleaner komme das war der einzige Scan den ich gemacht habe bin da leider kein Fachmann und weiß nicht wo man da rankommt hoffe der frst log hilft dir weiter.
FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 25-01-2014 01
Ran by ANDREAS (administrator) on ANDREAS-PC on 25-01-2014 23:31:49
Running from C:\Users\ANDREAS\Downloads
Microsoft® Windows Vista™ Home Premium  Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 7
Boot Mode: Normal



==================== Processes (Whitelisted) ===================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(Cherished Technololgy LIMITED) C:\ProgramData\IePluginService\PluginService.exe
(Cherished Technololgy LIMITED) C:\ProgramData\WPM\wprotectmanager.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Teruten) C:\Windows\System32\FsUsbExService.Exe
() C:\Program Files\ICQ6Toolbar\ICQ Service.exe
() C:\Program Files\Mobogenie\MgAssist.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe
(Nero AG) C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Prolific Technology Inc.) C:\Windows\System32\IoctlSvc.exe
() C:\Windows\System32\PSIService.exe
() C:\Program Files\Realtek Semiconductor Corp\Realtek USB 2.0 Card Reader\reset.exe
() C:\Program Files\Mobogenie\DaemonProcess.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corporation) C:\Windows\ehome\ehtray.exe
(Google Inc.) C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Badoo) C:\ProgramData\Badoo\Badoo Desktop\1.6.58.1220\Badoo.Desktop.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe
(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
() C:\Program Files\CyberLink\Shared Files\RichVideo.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe
(Google Inc.) C:\Users\ANDREAS\AppData\Local\Google\Chrome\Application\chrome.exe
() C:\Program Files\Amazon Browser Bar\ToolbarUpdaterService.exe
(X10) C:\Program Files\Common Files\X10\Common\X10nets.exe
(Google Inc.) C:\Users\ANDREAS\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\ANDREAS\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\ANDREAS\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\ANDREAS\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\ANDREAS\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\ANDREAS\AppData\Local\Google\Chrome\Application\chrome.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version8\TeamViewer.exe
(Google Inc.) C:\Users\ANDREAS\AppData\Local\Google\Chrome\Application\chrome.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version8\tv_w32.exe
(Google Inc.) C:\Users\ANDREAS\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\ANDREAS\AppData\Local\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
(Google Inc.) C:\Users\ANDREAS\AppData\Local\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\conime.exe
(Google Inc.) C:\Users\ANDREAS\AppData\Local\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Windows Defender] - C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [6609440 2008-10-31] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1111336 2008-05-08] (Synaptics, Inc.)
HKLM\...\Run: [NvCplDaemon] - C:\Windows\system32\NvCpl.dll [13601312 2008-11-21] (NVIDIA Corporation)
HKLM\...\Run: [NvMediaCenter] - C:\Windows\system32\NvMcTray.dll [92704 2008-11-21] (NVIDIA Corporation)
HKLM\...\Run: [NPSStartup] - [x]
HKLM\...\Run: [] - [x]
HKLM\...\Run: [SunJavaUpdateSched] - "C:\Program Files\Java\jre7\bin\jusched.exe"
HKLM\...\Run: [BCSSync] - C:\Program Files\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)
HKLM\...\Run: [mobilegeni daemon] - C:\Program Files\Mobogenie\DaemonProcess.exe [766656 2014-01-09] ()
HKCU\...\Run: [ehTray.exe] - C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation)
HKCU\...\Run: [swg] - C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2009-02-21] (Google Inc.)
HKCU\...\Run: [Google Update] - C:\Users\ANDREAS\AppData\Local\Google\Update\GoogleUpdate.exe [136176 2011-06-02] (Google Inc.)
HKCU\...\Run: [Skype] - C:\Program Files\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)
HKCU\...\Run: [Badoo Desktop] - C:\ProgramData\Badoo\Badoo Desktop\1.6.58.1220\Badoo.Desktop.exe [1067232 2012-12-24] (Badoo)
HKCU\...\Run: [ConduitFloatingPlugin_lcnnhcneegeeojhgpfijnlnocjdmlaon] - C:\Users\ANDREAS\AppData\Roaming\ValueApps\CH\TBVerifier.dll [281888 2013-08-25] (Conduit Ltd.)
HKCU\...\Run: [NextLive] - C:\Users\ANDREAS\AppData\Roaming\newnext.me\nengine.dll [1283584 2014-01-06] (NewNextDotMe)
HKCU\...\RunOnce: [Shockwave Updater] - C:\Windows\System32\Adobe\SHOCKW~1\SWHELP~1.EXE -Update -1103471 -"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; GTB0.0; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 3.5.30729; .NET CLR 3.0.30618)" -"hxxp://www.gamevial.com/linkers/spillgames.php?game=teamtanks" [447928 2008-08-06] (Adobe Systems, Inc.)
MountPoints2: {1b967737-34bc-11e0-b25d-001f1613456e} - C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RUNdLl32.ExE  .\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx,ahaezedrn
MountPoints2: {519e1c04-0052-11de-b969-806e6f6e6963} - E:\Autorun.exe
HKU\Default\...\Run: [WindowsWelcomeCenter] - C:\Windows\system32\oobefldr.dll [ 2008-01-21] (Microsoft Corporation)
HKU\Default User\...\Run: [WindowsWelcomeCenter] - C:\Windows\system32\oobefldr.dll [ 2008-01-21] (Microsoft Corporation)
AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL => C:\Program Files\Google\Google Desktop Search\GoogleDesktopNetwork3.dll [123392 2010-08-24] (Google)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.awesomehp.com/web/?type=ds&ts=1390646505&from=amt&uid=WDCXWD3200BEVT-22ZCT0_WD-WXEX08TJ0331J0331&q={searchTerms}
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.awesomehp.com/?type=hp&ts=1390646505&from=amt&uid=WDCXWD3200BEVT-22ZCT0_WD-WXEX08TJ0331J0331
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.awesomehp.com/?type=hp&ts=1390646505&from=amt&uid=WDCXWD3200BEVT-22ZCT0_WD-WXEX08TJ0331J0331
HKCU\Software\Microsoft\Internet Explorer\Main,ICQ Search = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1390646505&from=amt&uid=WDCXWD3200BEVT-22ZCT0_WD-WXEX08TJ0331J0331&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.awesomehp.com/?type=hp&ts=1390646505&from=amt&uid=WDCXWD3200BEVT-22ZCT0_WD-WXEX08TJ0331J0331
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.awesomehp.com/?type=hp&ts=1390646505&from=amt&uid=WDCXWD3200BEVT-22ZCT0_WD-WXEX08TJ0331J0331
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1390646505&from=amt&uid=WDCXWD3200BEVT-22ZCT0_WD-WXEX08TJ0331J0331&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.awesomehp.com/web/?type=ds&ts=1390646505&from=amt&uid=WDCXWD3200BEVT-22ZCT0_WD-WXEX08TJ0331J0331&q={searchTerms}
URLSearchHook: HKLM - Default Value = {855F3B16-6D32-4fe6-8A56-BBB695989046}
URLSearchHook: HKLM - ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\1011101843\ICQToolBar.dll (ICQ)
URLSearchHook: HKLM - DVDVideoSoftTB Toolbar - {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} - C:\Program Files\DVDVideoSoft\prxtbDVD2.dll (Conduit Ltd.)
URLSearchHook: ATTENTION ==> Default URLSearchHook is missing.
URLSearchHook: HKCU - UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
URLSearchHook: HKCU - ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\1011101843\ICQToolBar.dll (ICQ)
URLSearchHook: HKCU - DVDVideoSoftTB Toolbar - {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} - C:\Program Files\DVDVideoSoft\prxtbDVD2.dll (Conduit Ltd.)
URLSearchHook: HKCU - Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll No File
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.awesomehp.com/?type=sc&ts=1390646505&from=amt&uid=WDCXWD3200BEVT-22ZCT0_WD-WXEX08TJ0331J0331
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1390646505&from=amt&uid=WDCXWD3200BEVT-22ZCT0_WD-WXEX08TJ0331J0331&q={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1390646505&from=amt&uid=WDCXWD3200BEVT-22ZCT0_WD-WXEX08TJ0331J0331&q={searchTerms}
SearchScopes: HKLM - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2269050
SearchScopes: HKCU - {171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} URL = hxxp://websearch.ask.com/custom/java/redirect?client=ie&tb=ORJ&o=100000026&src=crm&q={searchTerms}&locale=&apn_ptnrs=U3&apn_dtid=OSJ000
SearchScopes: HKCU - {6552C7DD-90A4-4387-B795-F8F96747DE19} URL = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
SearchScopes: HKCU - {70D46D94-BF1E-45ED-B567-48701376298E} URL = hxxp://127.0.0.1:4664/search&s=M29tX-1SyPYf1-ot2yIDoG314HU?q={searchTerms}
SearchScopes: HKCU - {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxp://searchqm.com/search.php?channel=sfde203fbdgy21&q={searchTerms}
SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2269050
BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll No File
BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: IETabPage Class - {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} - C:\Program Files\SupTab\SupTab.dll (Thinknice Co. Limited)
BHO: FBDownloader - {553318DA-D010-469E-84B1-496563CAE1BF} - C:\Users\ANDREAS\AppData\Local\fbDownloader\Extensions\FBDownloader.dll (HTTO Group, Ltd)
BHO: flash-Enhancer - {5A60B6BB-FA81-4EFA-AB9C-A820E2143736} - C:\Program Files\AmiExt\flashEnhancer\ie\flashEnhancer.dll ()
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: No Name - {7E853D72-626A-48EC-A868-BA8D5E23E045} -  No File
BHO: Re-markit - {8c08c976-46ad-43b0-9369-ec45c3ab24d0} - C:\Program Files\Re-markit\150.dll ()
BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: ValueApps - {93DBF2BB-A2B3-4683-A92E-57E60751F346} - C:\Program Files\Conduit\ValueApps\IE\ValueAppsLoader.dll (Conduit Ltd.)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll (Google Inc.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Tracker Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
BHO: DVDVideoSoftTB Toolbar - {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} - C:\Program Files\DVDVideoSoft\prxtbDVD2.dll (Conduit Ltd.)
BHO: AlxHelper Class - {F443A627-5009-4323-9C1D-7FD598D0D712} - C:\Program Files\Amazon Browser Bar\AmazonBrowserBar.3.0.dll (Amazon.com)
BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll No File
Toolbar: HKLM - ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\1011101843\ICQToolBar.dll (ICQ)
Toolbar: HKLM - DVDVideoSoftTB Toolbar - {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} - C:\Program Files\DVDVideoSoft\prxtbDVD2.dll (Conduit Ltd.)
Toolbar: HKLM - Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll No File
Toolbar: HKLM - Tracker Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM - Amazon Browser Bar - {EA582743-9076-4178-9AA6-7393FDF4D5CE} - C:\Program Files\Amazon Browser Bar\AmazonBrowserBar.3.0.dll (Amazon.com)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - DVDVideoSoftTB Toolbar - {E9911EC6-1BCC-40B0-9993-E0EEA7F6953F} - C:\Program Files\DVDVideoSoft\prxtbDVD2.dll (Conduit Ltd.)
Toolbar: HKCU - Tracker Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_21-windows-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
DPF: {CAFEEFAC-0017-0000-0021-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_21-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_21-windows-i586.cab
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.8.5.1302.1018.dll (Microsoft Corporation)
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.8.5.1302.1018.dll (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [147456] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\ANDREAS\AppData\Roaming\Mozilla\Firefox\Profiles\ykqb8vj2.default
FF user.js: detected! => C:\Users\ANDREAS\AppData\Roaming\Mozilla\Firefox\Profiles\ykqb8vj2.default\user.js
FF NewTab: hxxp://www.awesomehp.com/newtab/?type=nt&ts=1390646505&from=amt&uid=WDCXWD3200BEVT-22ZCT0_WD-WXEX08TJ0331J0331
FF DefaultSearchEngine: awesomehp
FF SearchEngineOrder.1: Ask.com
FF SelectedSearchEngine: awesomehp
FF Homepage: hxxp://www.awesomehp.com/?type=hp&ts=1390646505&from=amt&uid=WDCXWD3200BEVT-22ZCT0_WD-WXEX08TJ0331J0331
FF Keyword.URL: hxxp://search.fbdownloader.com/search.php?channel=sfde203fbdgy21&q=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @google.com/npPicasa2,version=2.0.0 - C:\Program Files\Picasa2\npPicasa2.dll No File
FF Plugin: @java.com/DTPlugin,version=10.21.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.21.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.130\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @pandonetworks.com/PandoWebPlugin - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin HKCU: @lightspark.github.com/Lightspark;version=1 - C:\Program Files\Lightspark 0.5.3-git\nplightsparkplugin.dll ( )
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\ANDREAS\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\ANDREAS\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF SearchPlugin: C:\Users\ANDREAS\AppData\Roaming\Mozilla\Firefox\Profiles\ykqb8vj2.default\searchplugins\askcom.xml
FF SearchPlugin: C:\Users\ANDREAS\AppData\Roaming\Mozilla\Firefox\Profiles\ykqb8vj2.default\searchplugins\askcomsearch.xml
FF SearchPlugin: C:\Users\ANDREAS\AppData\Roaming\Mozilla\Firefox\Profiles\ykqb8vj2.default\searchplugins\babylon.xml
FF SearchPlugin: C:\Users\ANDREAS\AppData\Roaming\Mozilla\Firefox\Profiles\ykqb8vj2.default\searchplugins\delta.xml
FF SearchPlugin: C:\Users\ANDREAS\AppData\Roaming\Mozilla\Firefox\Profiles\ykqb8vj2.default\searchplugins\FBDownloader.xml
FF SearchPlugin: C:\Users\ANDREAS\AppData\Roaming\Mozilla\Firefox\Profiles\ykqb8vj2.default\searchplugins\fbdownloader_search.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\awesomehp.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Plus-HD-1.6 - C:\Users\ANDREAS\AppData\Roaming\Mozilla\Firefox\Profiles\ykqb8vj2.default\Extensions\6c937ed6-be66-4f72-9a60-ce5789cc7f09@53ba6712-2cae-46e2-b821-95baea44e049.com [2014-01-06]
FF Extension: Delta Toolbar - C:\Users\ANDREAS\AppData\Roaming\Mozilla\Firefox\Profiles\ykqb8vj2.default\Extensions\ffxtlbr@delta.com [2013-07-16]
FF Extension: Tracker Toolbar - C:\Users\ANDREAS\AppData\Roaming\Mozilla\Firefox\Profiles\ykqb8vj2.default\Extensions\toolbar@ask.com [2012-12-03]
FF Extension: Value Apps - C:\Users\ANDREAS\AppData\Roaming\Mozilla\Firefox\Profiles\ykqb8vj2.default\Extensions\{94cd2cc3-083f-49ba-a218-4cda4b4829fd} [2014-01-25]
FF Extension: Amazon 1Button App for Firefox - C:\Users\ANDREAS\AppData\Roaming\Mozilla\Firefox\Profiles\ykqb8vj2.default\Extensions\abb@amazon.com.xpi [2013-09-04]
FF Extension: Extension_Protected - C:\Users\ANDREAS\AppData\Roaming\Mozilla\Firefox\Profiles\ykqb8vj2.default\Extensions\jid0-O6MIff3eO5dIGf5Tcv8RsJDKxrs@jetpack.xpi [2014-01-25]
FF Extension: Lightning Speed Dial - C:\Users\ANDREAS\AppData\Roaming\Mozilla\Firefox\Profiles\ykqb8vj2.default\Extensions\lightningnewtab@gmail.com.xpi [2014-01-25]
FF Extension: OfferMosquito - C:\Users\ANDREAS\AppData\Roaming\Mozilla\Firefox\Profiles\ykqb8vj2.default\Extensions\om@offermosquito.com.xpi [2013-07-19]
FF Extension: ReloadEvery - C:\Users\ANDREAS\AppData\Roaming\Mozilla\Firefox\Profiles\ykqb8vj2.default\Extensions\{888d99e7-e8b5-46a3-851e-1ec45da1e644}.xpi [2011-08-29]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ []
FF HKLM\...\Firefox\Extensions: [lightningnewtab@gmail.com] - C:\Users\ANDREAS\AppData\Roaming\Mozilla\Firefox\Profiles\ykqb8vj2.default\extensions\lightningnewtab@gmail.com.xpi
FF Extension: No Name - C:\Users\ANDREAS\AppData\Roaming\Mozilla\Firefox\Profiles\ykqb8vj2.default\extensions\lightningnewtab@gmail.com.xpi [2014-01-25]
FF HKLM\...\Firefox\Extensions: [ext@flashenhancer.com] - C:\Program Files\AmiExt\flashEnhancer\ff
FF Extension: flash-Enhancer - C:\Program Files\AmiExt\flashEnhancer\ff [2014-01-25]
FF HKCU\...\Firefox\Extensions: [{9caf5d89-eb75-43ab-9b57-9d4b5b6094ef}] - C:\Program Files\Re-markit\150.xpi
FF Extension: Re-markit - C:\Program Files\Re-markit\150.xpi [2014-01-25]
FF StartMenuInternet: FIREFOX.EXE - C:\Program Files\Mozilla Firefox\firefox.exe hxxp://www.awesomehp.com/?type=sc&ts=1390646505&from=amt&uid=WDCXWD3200BEVT-22ZCT0_WD-WXEX08TJ0331J0331

Chrome: 
=======
CHR HomePage: hxxp://www.awesomehp.com/?type=hp&ts=1390646505&from=amt&uid=WDCXWD3200BEVT-22ZCT0_WD-WXEX08TJ0331J0331
CHR DefaultSearchKeyword: awesomehp
CHR DefaultSearchProvider: awesomehp
CHR DefaultSearchURL: hxxp://www.awesomehp.com/web/?type=ds&ts=1390646505&from=amt&uid=WDCXWD3200BEVT-22ZCT0_WD-WXEX08TJ0331J0331&q={searchTerms}
CHR DefaultNewTabURL: 
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\ANDREAS\AppData\Local\Google\Chrome\Application\32.0.1700.76\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\ANDREAS\AppData\Local\Google\Chrome\Application\32.0.1700.76\pdf.dll ()
CHR Plugin: (Shockwave Flash) - C:\Users\ANDREAS\AppData\Local\Google\Chrome\Application\32.0.1700.76\gcswf32.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32.dll No File
CHR Plugin: (registryAccess) - C:\Users\ANDREAS\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaangmfdabjilefmognkgcebjgcojek\7.14.1.20932_0\background/registryAccess.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.4) - C:\Program Files\QuickTime\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.4) - C:\Program Files\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.4) - C:\Program Files\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.4) - C:\Program Files\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.4) - C:\Program Files\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.4) - C:\Program Files\QuickTime\plugins\npqtplugin6.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.4) - C:\Program Files\QuickTime\plugins\npqtplugin7.dll (Apple Inc.)
CHR Plugin: (Google Earth Plugin) - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File
CHR Plugin: (Pando Web Plugin) - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
CHR Plugin: (iTunes Application Detector) - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (Shockwave for Director) - C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
CHR Plugin: (Silverlight Plug-In) - c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll No File
CHR Plugin: (Windows Presentation Foundation) - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
CHR Extension: (YouTube) - C:\Users\ANDREAS\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2011-12-13]
CHR Extension: (YouTube) - C:\Users\ANDREAS\AppData\Local\Google\Chrome\User Data\Default\Extensions\cekcjpgehmohobmdiikfnopibipmgnml [2014-01-25]
CHR Extension: (flash-Enhancer) - C:\Users\ANDREAS\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbealecnakbhfoeeipcnoboempfkbjd [2014-01-25]
CHR Extension: (Google-Suche) - C:\Users\ANDREAS\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2011-12-13]
CHR Extension: (Re-markit) - C:\Users\ANDREAS\AppData\Local\Google\Chrome\User Data\Default\Extensions\dcpfhaghaadpjpgocojgnlhjcieeooel [2014-01-25]
CHR Extension: (OfferMosquito) - C:\Users\ANDREAS\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbmdkmlcnbapgegninelmjbfibaghdmk [2013-08-12]
CHR Extension: (Value apps) - C:\Users\ANDREAS\AppData\Local\Google\Chrome\User Data\Default\Extensions\lcnnhcneegeeojhgpfijnlnocjdmlaon [2014-01-25]
CHR Extension: (Google Wallet) - C:\Users\ANDREAS\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-26]
CHR Extension: (Amazon 1Button App for Chrome) - C:\Users\ANDREAS\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbjikboenpfhbbejgkoklgkhjpfogcam [2014-01-25]
CHR Extension: (Google Mail) - C:\Users\ANDREAS\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2011-12-13]
CHR Extension: (Lightning speedDial) - C:\Users\ANDREAS\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkndmigholgfjlniaohblojbhgjbkakn [2014-01-25]
CHR HKLM\...\Chrome\Extension: [cgbealecnakbhfoeeipcnoboempfkbjd] - C:\Program Files\AmiExt\flashEnhancer\ch\flashEnhancer.crx [2014-01-12]
CHR HKLM\...\Chrome\Extension: [dcpfhaghaadpjpgocojgnlhjcieeooel] - C:\Program Files\Re-markit\150.crx [2014-01-25]
CHR HKLM\...\Chrome\Extension: [pkndmigholgfjlniaohblojbhgjbkakn] - C:\Users\ANDREAS\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtabv2.crx [2014-01-25]
CHR HKCU\...\Chrome\Extension: [gbmdkmlcnbapgegninelmjbfibaghdmk] - C:\Users\ANDREAS\AppData\Local\Google\Chrome\User Data\Default\ext_offermosquito\ext_offermosquito.crx [2013-07-19]
CHR HKCU\...\Chrome\Extension: [pbjikboenpfhbbejgkoklgkhjpfogcam] - C:\Program Files\Amazon\ABB\AmazonChrome-bds-amzn.crx [2014-01-15]

========================== Services (Whitelisted) =================

R2 Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [144672 2009-08-28] (Apple Inc.)
S3 GoogleDesktopManager-051210-111108; C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [30192 2010-08-24] (Google)
S2 gupdate1c9e85db5f245b0; C:\Program Files\Google\Update\GoogleUpdate.exe [133104 2009-06-08] (Google Inc.)
R2 ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [247096 2010-09-06] ()
R2 IePluginService; C:\ProgramData\IePluginService\PluginService.exe [508016 2014-01-14] (Cherished Technololgy LIMITED)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe [235216 2013-09-06] (McAfee, Inc.)
R2 MgAssistService; C:\Program Files\Mobogenie\MgAssist.exe [63168 2014-01-09] ()
R2 ProtexisLicensing; C:\Windows\system32\PSIService.exe [177704 2007-06-05] ()
R2 resetWinService; C:\Program Files\Realtek Semiconductor Corp\Realtek USB 2.0 Card Reader\reset.exe [70656 2008-10-29] ()
R2 RichVideo; C:\Program Files\CyberLink\Shared Files\RichVideo.exe [241734 2008-06-28] ()
S2 UI Assistant Service; C:\Program Files\1&1 Surf-Stick\AssistantServices.exe [270672 2011-08-25] ()
R2 Updater Service for AMZN; C:\Program Files\Amazon Browser Bar\ToolbarUpdaterService.exe [222368 2013-03-21] ()
S3 usnjsvc; C:\Program Files\Windows Live\Messenger\usnsvc.exe [98328 2007-10-18] (Microsoft Corporation)
S3 WLSetupSvc; C:\Program Files\Windows Live\installer\WLSetupSvc.exe [266240 2007-10-25] (Microsoft Corporation)
R2 Wpm; C:\ProgramData\WPM\wprotectmanager.exe [493568 2014-01-25] (Cherished Technololgy LIMITED)
R2 x10nets; C:\Program Files\Common Files\X10\Common\X10nets.exe [20480 2001-11-12] (X10)

==================== Drivers (Whitelisted) ====================

R3 Cam5607; C:\Windows\System32\Drivers\BisonC07.sys [1461032 2008-12-04] (Bison Electronics. Inc. )
R3 FsUsbExDisk; C:\Windows\system32\FsUsbExDisk.SYS [36608 2009-03-31] ()
S3 massfilter; C:\Windows\System32\drivers\massfilter.sys [9216 2011-03-26] (MBB Incorporated)
S3 PhilCap; C:\Windows\System32\DRIVERS\PhilCap.sys [908896 2007-07-31] (NXP Semiconductors Germany GmbH)
S3 ss_bbus; C:\Windows\System32\DRIVERS\ss_bbus.sys [90112 2009-03-20] (MCCI)
S3 ss_bmdfl; C:\Windows\System32\DRIVERS\ss_bmdfl.sys [14976 2009-03-20] (MCCI Corporation)
S3 ss_bmdm; C:\Windows\System32\DRIVERS\ss_bmdm.sys [121856 2009-03-20] (MCCI Corporation)
R3 X10Hid; C:\Windows\System32\Drivers\x10hid.sys [13976 2006-11-17] (X10 Wireless Technology, Inc.)
S2 DgiVecp; \??\C:\Windows\system32\Drivers\DgiVecp.sys [x]
S3 EagleXNt; \??\C:\Windows\system32\drivers\EagleXNt.sys [x]
S3 IpInIp; system32\DRIVERS\ipinip.sys [x]
S3 netr28u; system32\DRIVERS\netr28u.sys [x]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-25 23:31 - 2014-01-25 23:33 - 00032264 _____ C:\Users\ANDREAS\Downloads\FRST.txt
2014-01-25 23:31 - 2014-01-25 23:31 - 00000000 ____D C:\FRST
2014-01-25 23:30 - 2014-01-25 23:30 - 01222144 _____ (Farbar) C:\Users\ANDREAS\Downloads\FRST.exe
2014-01-25 23:30 - 2014-01-25 23:30 - 00685888 _____ C:\Users\ANDREAS\Downloads\ZipExtractorSetup (3).exe
2014-01-25 23:30 - 2014-01-25 23:30 - 00685888 _____ C:\Users\ANDREAS\Downloads\ZipExtractorSetup (2).exe
2014-01-25 23:30 - 2014-01-25 23:30 - 00000942 _____ C:\Users\ANDREAS\Desktop\Continue Zip Extractor Installation.lnk
2014-01-25 23:25 - 2014-01-25 23:25 - 00685888 _____ C:\Users\ANDREAS\Downloads\ZipExtractorSetup (1).exe
2014-01-25 23:24 - 2014-01-25 23:24 - 00685888 _____ C:\Users\ANDREAS\Downloads\ZipExtractorSetup.exe
2014-01-25 20:10 - 2014-01-25 20:10 - 00001828 _____ C:\Users\ANDREAS\Desktop\Entfernen des Avira EU-Cleaners.lnk
2014-01-25 20:10 - 2014-01-25 20:10 - 00001772 _____ C:\Users\ANDREAS\Desktop\Avira EU-Cleaner.lnk
2014-01-25 20:09 - 2014-01-25 20:09 - 02209056 _____ C:\Users\ANDREAS\Downloads\avira-eu-cleaner_de.exe
2014-01-25 20:09 - 2014-01-25 20:09 - 02209056 _____ C:\Users\ANDREAS\Downloads\avira-eu-cleaner_de (1).exe
2014-01-25 19:47 - 2014-01-25 21:25 - 140300048 _____ C:\Users\ANDREAS\Downloads\avira_antivirus_suite_de.exe
2014-01-25 19:11 - 2014-01-25 19:11 - 00000000 ____D C:\Users\ANDREAS\AppData\Local\Amazon Browser Bar
2014-01-25 19:10 - 2014-01-25 19:11 - 00000000 ____D C:\Program Files\Amazon Browser Bar
2014-01-25 19:10 - 2014-01-25 19:10 - 00129536 _____ C:\Users\Public\AlexaNSISPlugin.8520.dll
2014-01-25 19:10 - 2014-01-25 19:10 - 00000000 ____D C:\Program Files\Amazon
2014-01-25 19:09 - 2014-01-25 23:08 - 00000276 _____ C:\Windows\Tasks\RegClean Pro_UPDATES.job
2014-01-25 19:09 - 2014-01-25 23:08 - 00000268 _____ C:\Windows\Tasks\RegClean Pro_DEFAULT.job
2014-01-25 19:09 - 2014-01-25 19:09 - 00000851 _____ C:\Users\Public\Desktop\RegClean Pro.lnk
2014-01-25 19:09 - 2014-01-25 19:09 - 00000000 ____D C:\Users\ANDREAS\AppData\Roaming\systweak
2014-01-25 19:09 - 2014-01-25 19:09 - 00000000 ____D C:\Program Files\RegClean Pro
2014-01-25 19:09 - 2014-01-21 17:28 - 00018776 _____ (Systweak Inc., (www.systweak.com)) C:\Windows\system32\roboot.exe
2014-01-25 19:07 - 2014-01-25 19:08 - 05095648 _____ (Systweak Inc                                                ) C:\Users\ANDREAS\Downloads\rcpsetup_chip_de_chip_de.exe
2014-01-25 11:45 - 2014-01-25 11:45 - 00000000 ____D C:\Program Files\Lightspark 0.5.3-git
2014-01-25 11:44 - 2014-01-25 23:10 - 00000000 ____D C:\Users\ANDREAS\AppData\Roaming\newnext.me
2014-01-25 11:44 - 2014-01-25 11:59 - 00000000 ____D C:\Users\ANDREAS\AppData\Local\Mobogenie
2014-01-25 11:44 - 2014-01-25 11:44 - 00000000 ____D C:\Users\ANDREAS\Documents\Mobogenie
2014-01-25 11:44 - 2014-01-25 11:44 - 00000000 ____D C:\Users\ANDREAS\AppData\Local\genienext
2014-01-25 11:44 - 2014-01-25 11:44 - 00000000 ____D C:\Users\ANDREAS\AppData\Local\cache
2014-01-25 11:44 - 2014-01-25 11:44 - 00000000 ____D C:\Users\ANDREAS\.android
2014-01-25 11:44 - 2014-01-25 11:44 - 00000000 ____D C:\Program Files\AmiExt
2014-01-25 11:44 - 2014-01-25 11:44 - 00000000 _____ C:\Users\ANDREAS\daemonprocess.txt
2014-01-25 11:43 - 2014-01-25 11:43 - 00000820 _____ C:\Users\ANDREAS\Desktop\Mobogenie.lnk
2014-01-25 11:43 - 2014-01-25 11:43 - 00000000 ____D C:\Users\ANDREAS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mobogenie
2014-01-25 11:42 - 2014-01-25 11:44 - 00000000 ____D C:\Program Files\Mobogenie
2014-01-25 11:42 - 2014-01-25 11:42 - 00000000 ____D C:\ProgramData\WPM
2014-01-25 11:42 - 2014-01-25 11:42 - 00000000 ____D C:\ProgramData\IePluginService
2014-01-25 11:42 - 2014-01-25 11:42 - 00000000 ____D C:\Program Files\SupTab
2014-01-25 11:40 - 2014-01-25 23:09 - 00000364 _____ C:\Windows\Tasks\Re-markit Update.job
2014-01-25 11:40 - 2014-01-25 11:41 - 00000000 _____ C:\END
2014-01-25 11:40 - 2014-01-25 11:40 - 00000000 ____D C:\Program Files\Re-markit
2014-01-25 11:39 - 2014-01-25 23:16 - 00000364 _____ C:\Windows\Tasks\AmiUpdXp.job
2014-01-25 11:39 - 2014-01-25 11:39 - 00000000 ____D C:\Users\ANDREAS\AppData\Local\SwvUpdater
2014-01-14 20:51 - 2014-01-14 20:51 - 03230432 _____ (Badoo) C:\Users\ANDREAS\Downloads\badoo.desktop.installer-1.6.58 (1).exe
2014-01-14 20:48 - 2014-01-14 20:51 - 00000928 _____ C:\Users\ANDREAS\Desktop\Badoo.Desktop.lnk
2014-01-14 20:47 - 2014-01-14 20:48 - 03230432 _____ (Badoo) C:\Users\ANDREAS\Downloads\badoo.desktop.installer-1.6.58.exe
2014-01-11 20:02 - 2014-01-11 20:02 - 00000000 ____D C:\Users\ANDREAS\AppData\Local\Blizzard
2014-01-11 19:30 - 2014-01-18 11:35 - 00000000 ____D C:\Program Files\Hearthstone
2014-01-11 19:30 - 2014-01-11 19:30 - 00000958 _____ C:\Users\Public\Desktop\Hearthstone.lnk
2014-01-11 19:29 - 2014-01-11 19:29 - 05933240 _____ (Blizzard Entertainment) C:\Users\ANDREAS\Downloads\Hearthstone-Beta-Setup-deDE.exe
2014-01-11 19:25 - 2014-01-25 18:29 - 00000000 ____D C:\Users\ANDREAS\AppData\Local\Battle.net
2014-01-11 19:25 - 2014-01-11 19:28 - 00000000 ____D C:\Users\ANDREAS\AppData\Roaming\Battle.net
2014-01-11 19:25 - 2014-01-11 19:25 - 00000947 _____ C:\Users\Public\Desktop\Battle.net.lnk
2014-01-11 19:25 - 2014-01-11 19:25 - 00000000 ____D C:\Users\ANDREAS\AppData\Local\Blizzard Entertainment
2014-01-11 19:24 - 2014-01-17 00:48 - 00000000 ____D C:\Program Files\Battle.net
2014-01-11 19:24 - 2014-01-11 19:30 - 00000000 ____D C:\Program Files\Common Files\Blizzard Entertainment
2014-01-11 19:24 - 2014-01-11 19:25 - 00000000 ____D C:\ProgramData\Blizzard Entertainment
2014-01-11 19:22 - 2014-01-11 19:22 - 00000000 ____D C:\ProgramData\Battle.net
2014-01-11 19:21 - 2014-01-11 19:21 - 05717688 _____ (Blizzard Entertainment) C:\Users\ANDREAS\Downloads\Battle.net-Beta-Setup-deDE.exe
2014-01-09 22:03 - 2014-01-09 22:04 - 01467128 _____ C:\Users\ANDREAS\Downloads\SystemCheck_deDE.exe
2014-01-06 22:03 - 2014-01-06 22:03 - 00000286 _____ C:\Users\ANDREAS\Desktop\Stromstände.txt

==================== One Month Modified Files and Folders =======

2014-01-25 23:33 - 2014-01-25 23:31 - 00032264 _____ C:\Users\ANDREAS\Downloads\FRST.txt
2014-01-25 23:31 - 2014-01-25 23:31 - 00000000 ____D C:\FRST
2014-01-25 23:30 - 2014-01-25 23:30 - 01222144 _____ (Farbar) C:\Users\ANDREAS\Downloads\FRST.exe
2014-01-25 23:30 - 2014-01-25 23:30 - 00685888 _____ C:\Users\ANDREAS\Downloads\ZipExtractorSetup (3).exe
2014-01-25 23:30 - 2014-01-25 23:30 - 00685888 _____ C:\Users\ANDREAS\Downloads\ZipExtractorSetup (2).exe
2014-01-25 23:30 - 2014-01-25 23:30 - 00000942 _____ C:\Users\ANDREAS\Desktop\Continue Zip Extractor Installation.lnk
2014-01-25 23:30 - 2008-12-16 06:12 - 00000438 ____H C:\Windows\Tasks\User_Feed_Synchronization-{103B65BD-4798-4CA0-9487-EB211B637804}.job
2014-01-25 23:28 - 2009-06-30 16:04 - 00001098 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-25 23:25 - 2014-01-25 23:25 - 00685888 _____ C:\Users\ANDREAS\Downloads\ZipExtractorSetup (1).exe
2014-01-25 23:24 - 2014-01-25 23:24 - 00685888 _____ C:\Users\ANDREAS\Downloads\ZipExtractorSetup.exe
2014-01-25 23:23 - 2006-11-02 13:47 - 00003616 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-25 23:23 - 2006-11-02 13:47 - 00003616 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-25 23:16 - 2014-01-25 11:39 - 00000364 _____ C:\Windows\Tasks\AmiUpdXp.job
2014-01-25 23:15 - 2011-08-31 17:42 - 01594359 _____ C:\Windows\WindowsUpdate.log
2014-01-25 23:15 - 2006-11-02 11:33 - 01418806 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-25 23:14 - 2013-10-29 22:36 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-25 23:10 - 2014-01-25 11:44 - 00000000 ____D C:\Users\ANDREAS\AppData\Roaming\newnext.me
2014-01-25 23:10 - 2009-06-30 16:04 - 00001094 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-25 23:10 - 2009-02-21 21:16 - 00111608 _____ C:\Users\ANDREAS\AppData\Local\GDIPFONTCACHEV1.DAT
2014-01-25 23:10 - 2008-12-15 05:47 - 00048829 _____ C:\ProgramData\nvModes.001
2014-01-25 23:09 - 2014-01-25 11:40 - 00000364 _____ C:\Windows\Tasks\Re-markit Update.job
2014-01-25 23:09 - 2006-11-02 13:47 - 02320920 _____ C:\Windows\system32\FNTCACHE.DAT
2014-01-25 23:08 - 2014-01-25 19:09 - 00000276 _____ C:\Windows\Tasks\RegClean Pro_UPDATES.job
2014-01-25 23:08 - 2014-01-25 19:09 - 00000268 _____ C:\Windows\Tasks\RegClean Pro_DEFAULT.job
2014-01-25 23:08 - 2006-11-02 14:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-25 23:07 - 2009-08-29 22:55 - 00000012 _____ C:\Windows\bthservsdp.dat
2014-01-25 23:07 - 2006-11-02 14:01 - 00032630 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2014-01-25 22:45 - 2011-07-18 12:08 - 00001128 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-298663874-1514575747-3442136624-1000UA.job
2014-01-25 21:25 - 2014-01-25 19:47 - 140300048 _____ C:\Users\ANDREAS\Downloads\avira_antivirus_suite_de.exe
2014-01-25 20:36 - 2012-10-27 20:34 - 00001454 _____ C:\Users\ANDREAS\Desktop\org tierliste.txt
2014-01-25 20:10 - 2014-01-25 20:10 - 00001828 _____ C:\Users\ANDREAS\Desktop\Entfernen des Avira EU-Cleaners.lnk
2014-01-25 20:10 - 2014-01-25 20:10 - 00001772 _____ C:\Users\ANDREAS\Desktop\Avira EU-Cleaner.lnk
2014-01-25 20:09 - 2014-01-25 20:09 - 02209056 _____ C:\Users\ANDREAS\Downloads\avira-eu-cleaner_de.exe
2014-01-25 20:09 - 2014-01-25 20:09 - 02209056 _____ C:\Users\ANDREAS\Downloads\avira-eu-cleaner_de (1).exe
2014-01-25 19:11 - 2014-01-25 19:11 - 00000000 ____D C:\Users\ANDREAS\AppData\Local\Amazon Browser Bar
2014-01-25 19:11 - 2014-01-25 19:10 - 00000000 ____D C:\Program Files\Amazon Browser Bar
2014-01-25 19:10 - 2014-01-25 19:10 - 00129536 _____ C:\Users\Public\AlexaNSISPlugin.8520.dll
2014-01-25 19:10 - 2014-01-25 19:10 - 00000000 ____D C:\Program Files\Amazon
2014-01-25 19:10 - 2006-11-02 12:18 - 00000000 ___RD C:\Users\Public
2014-01-25 19:09 - 2014-01-25 19:09 - 00000851 _____ C:\Users\Public\Desktop\RegClean Pro.lnk
2014-01-25 19:09 - 2014-01-25 19:09 - 00000000 ____D C:\Users\ANDREAS\AppData\Roaming\systweak
2014-01-25 19:09 - 2014-01-25 19:09 - 00000000 ____D C:\Program Files\RegClean Pro
2014-01-25 19:08 - 2014-01-25 19:07 - 05095648 _____ (Systweak Inc                                                ) C:\Users\ANDREAS\Downloads\rcpsetup_chip_de_chip_de.exe
2014-01-25 18:45 - 2011-07-18 12:08 - 00001076 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-298663874-1514575747-3442136624-1000Core.job
2014-01-25 18:29 - 2014-01-11 19:25 - 00000000 ____D C:\Users\ANDREAS\AppData\Local\Battle.net
2014-01-25 11:59 - 2014-01-25 11:44 - 00000000 ____D C:\Users\ANDREAS\AppData\Local\Mobogenie
2014-01-25 11:45 - 2014-01-25 11:45 - 00000000 ____D C:\Program Files\Lightspark 0.5.3-git
2014-01-25 11:44 - 2014-01-25 11:44 - 00000000 ____D C:\Users\ANDREAS\Documents\Mobogenie
2014-01-25 11:44 - 2014-01-25 11:44 - 00000000 ____D C:\Users\ANDREAS\AppData\Local\genienext
2014-01-25 11:44 - 2014-01-25 11:44 - 00000000 ____D C:\Users\ANDREAS\AppData\Local\cache
2014-01-25 11:44 - 2014-01-25 11:44 - 00000000 ____D C:\Users\ANDREAS\.android
2014-01-25 11:44 - 2014-01-25 11:44 - 00000000 ____D C:\Program Files\AmiExt
2014-01-25 11:44 - 2014-01-25 11:44 - 00000000 _____ C:\Users\ANDREAS\daemonprocess.txt
2014-01-25 11:44 - 2014-01-25 11:42 - 00000000 ____D C:\Program Files\Mobogenie
2014-01-25 11:44 - 2009-02-21 21:15 - 00000000 ____D C:\Users\ANDREAS
2014-01-25 11:44 - 2008-12-15 05:37 - 00048829 _____ C:\ProgramData\nvModes.dat
2014-01-25 11:43 - 2014-01-25 11:43 - 00000820 _____ C:\Users\ANDREAS\Desktop\Mobogenie.lnk
2014-01-25 11:43 - 2014-01-25 11:43 - 00000000 ____D C:\Users\ANDREAS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mobogenie
2014-01-25 11:43 - 2009-03-06 20:40 - 00090112 _____ C:\Users\ANDREAS\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-01-25 11:42 - 2014-01-25 11:42 - 00000000 ____D C:\ProgramData\WPM
2014-01-25 11:42 - 2014-01-25 11:42 - 00000000 ____D C:\ProgramData\IePluginService
2014-01-25 11:42 - 2014-01-25 11:42 - 00000000 ____D C:\Program Files\SupTab
2014-01-25 11:41 - 2014-01-25 11:40 - 00000000 _____ C:\END
2014-01-25 11:41 - 2011-08-29 17:51 - 00001058 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-01-25 11:41 - 2011-07-18 12:12 - 00002256 _____ C:\Users\ANDREAS\Desktop\Google Chrome.lnk
2014-01-25 11:41 - 2011-06-23 23:30 - 00001953 _____ C:\Users\ANDREAS\Desktop\eBay.lnk
2014-01-25 11:41 - 2009-02-21 21:16 - 00001161 _____ C:\Users\ANDREAS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-01-25 11:41 - 2009-02-21 21:16 - 00000000 ____D C:\Users\ANDREAS\AppData\Local\Google
2014-01-25 11:40 - 2014-01-25 11:40 - 00000000 ____D C:\Program Files\Re-markit
2014-01-25 11:40 - 2012-05-03 18:56 - 00000000 ____D C:\Users\ANDREAS\AppData\Local\Conduit
2014-01-25 11:40 - 2010-02-08 13:27 - 00000000 ____D C:\Program Files\Conduit
2014-01-25 11:39 - 2014-01-25 11:39 - 00000000 ____D C:\Users\ANDREAS\AppData\Local\SwvUpdater
2014-01-22 00:43 - 2012-07-27 15:10 - 00001253 _____ C:\Users\ANDREAS\Desktop\Rufausbeute.txt
2014-01-21 17:28 - 2014-01-25 19:09 - 00018776 _____ (Systweak Inc., (www.systweak.com)) C:\Windows\system32\roboot.exe
2014-01-18 11:35 - 2014-01-11 19:30 - 00000000 ____D C:\Program Files\Hearthstone
2014-01-17 00:48 - 2014-01-11 19:24 - 00000000 ____D C:\Program Files\Battle.net
2014-01-14 20:51 - 2014-01-14 20:51 - 03230432 _____ (Badoo) C:\Users\ANDREAS\Downloads\badoo.desktop.installer-1.6.58 (1).exe
2014-01-14 20:51 - 2014-01-14 20:48 - 00000928 _____ C:\Users\ANDREAS\Desktop\Badoo.Desktop.lnk
2014-01-14 20:48 - 2014-01-14 20:47 - 03230432 _____ (Badoo) C:\Users\ANDREAS\Downloads\badoo.desktop.installer-1.6.58.exe
2014-01-11 20:02 - 2014-01-11 20:02 - 00000000 ____D C:\Users\ANDREAS\AppData\Local\Blizzard
2014-01-11 19:30 - 2014-01-11 19:30 - 00000958 _____ C:\Users\Public\Desktop\Hearthstone.lnk
2014-01-11 19:30 - 2014-01-11 19:24 - 00000000 ____D C:\Program Files\Common Files\Blizzard Entertainment
2014-01-11 19:29 - 2014-01-11 19:29 - 05933240 _____ (Blizzard Entertainment) C:\Users\ANDREAS\Downloads\Hearthstone-Beta-Setup-deDE.exe
2014-01-11 19:28 - 2014-01-11 19:25 - 00000000 ____D C:\Users\ANDREAS\AppData\Roaming\Battle.net
2014-01-11 19:25 - 2014-01-11 19:25 - 00000947 _____ C:\Users\Public\Desktop\Battle.net.lnk
2014-01-11 19:25 - 2014-01-11 19:25 - 00000000 ____D C:\Users\ANDREAS\AppData\Local\Blizzard Entertainment
2014-01-11 19:25 - 2014-01-11 19:24 - 00000000 ____D C:\ProgramData\Blizzard Entertainment
2014-01-11 19:22 - 2014-01-11 19:22 - 00000000 ____D C:\ProgramData\Battle.net
2014-01-11 19:21 - 2014-01-11 19:21 - 05717688 _____ (Blizzard Entertainment) C:\Users\ANDREAS\Downloads\Battle.net-Beta-Setup-deDE.exe
2014-01-11 19:19 - 2009-11-27 23:32 - 00000000 ____D C:\Users\ANDREAS\AppData\Roaming\Skype
2014-01-09 22:04 - 2014-01-09 22:03 - 01467128 _____ C:\Users\ANDREAS\Downloads\SystemCheck_deDE.exe
2014-01-06 22:03 - 2014-01-06 22:03 - 00000286 _____ C:\Users\ANDREAS\Desktop\Stromstände.txt
2013-12-30 16:40 - 2012-05-23 10:43 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service

Files to move or delete:
====================
C:\Users\Public\AlexaNSISPlugin.8520.dll


Some content of TEMP:
====================
C:\Users\ANDREAS\AppData\Local\Temp\dlLogic.exe
C:\Users\ANDREAS\AppData\Local\Temp\EnableExtDll.dll
C:\Users\ANDREAS\AppData\Local\Temp\ICReinstall_ZipExtractorSetup.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll
[2009-08-20 13:04] - [2009-03-03 05:39] - 0551424 ____A (Microsoft Corporation) 301AE00E12408650BADDC04DBC832830

 ATTENTION ======> If the system is having audio adware rpcss.dll is patched. Google the MD5, if the MD5 is unique the file is infected.
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-25 23:16

==================== End Of Log ============================
         

--- --- ---
#FRST Additions Logfile:

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 25-01-2014 01
Ran by ANDREAS at 2014-01-25 23:33:28
Running from C:\Users\ANDREAS\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

1&1 Surf-Stick (Version: 1.0.0.2 - )
350FS PowerC@m Flash (Version:  - )
Activation Assistant for the 2007 Microsoft Office suites (Version:  - Microsoft Corporation) <==== ATTENTION
Activation Assistant for the 2007 Microsoft Office suites (Version: 1.0 - Microsoft Corporation) Hidden <==== ATTENTION
Adobe AIR (Version: 2.6.0.19140 - Adobe Systems Incorporated)
Adobe AIR (Version: 2.6.0.19140 - Adobe Systems Incorporated) Hidden
Adobe Anchor Service CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden <==== ATTENTION
Adobe Bridge CS4 (Version: 3 - Adobe Systems Incorporated) Hidden
Adobe CMaps CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Color - Photoshop Specific CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Color EU Recommended Settings CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Color JA Extra Settings CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Color NA Extra Settings CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Color Video Profiles CS CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe CSI CS4 (Version: 1 - Adobe Systems Incorporated) Hidden
Adobe Default Language CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Device Central CS4 (Version: 2 - Adobe Systems Incorporated) Hidden <==== ATTENTION
Adobe Drive CS4 (Version: 1 - Adobe Systems Incorporated) Hidden
Adobe ExtendScript Toolkit CS4 (Version: 3.0.0 - Adobe Systems Incorporated) Hidden
Adobe Extension Manager CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 10 ActiveX (Version: 10.0.12.36 - Adobe Systems Incorporated)
Adobe Flash Player 11 Plugin (Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Fonts All (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Linguistics CS4 (Version: 4.0.0 - Adobe Systems Incorporated) Hidden
Adobe Output Module (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe PDF Library Files CS4 (Version: 9.0 - Adobe Systems Incorporated) Hidden
Adobe Photoshop CS4 (Version: 11.0 - Adobe Systems Incorporated)
Adobe Photoshop CS4 (Version: 11.0 - Adobe Systems Incorporated) Hidden
Adobe Photoshop CS4 Support (Version: 11.0 - Adobe Systems Incorporated) Hidden
Adobe Reader X (10.1.4) - Deutsch (Version: 10.1.4 - Adobe Systems Incorporated)
Adobe Search for Help (Version: 1.0 - Adobe Systems Incorporated) Hidden
Adobe Service Manager Extension (Version: 1.0 - Adobe Systems Incorporated) Hidden <==== ATTENTION
Adobe Setup (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Shockwave Player 11.5 (Version: 11.5.9.615 - Adobe Systems, Inc.)
Adobe Type Support CS4 (Version: 9.0 - Adobe Systems Incorporated) Hidden
Adobe Update Manager CS4 (Version: 6.0.0 - Adobe Systems Incorporated) Hidden
Adobe WinSoft Linguistics Plugin (Version: 1.1 - Adobe Systems Incorporated) Hidden
Adobe XMP Panels CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden
AdobeColorCommonSetCMYK (Version: 2.0 - Adobe Systems Incorporated) Hidden
Amazon Browser Bar (Version: 3.0.2012.0802 - Amazon.com)
Amazon Browser Settings (Version: 3.0 - Amazon)
Apple Application Support (Version: 1.0 - Apple Inc.)
Apple Mobile Device Support (Version: 2.6.0.32 - Apple Inc.) <==== ATTENTION
Apple Software Update (Version: 2.1.1.116 - Apple Inc.)
Ask Toolbar (Version: 1.15.11.0 - Ask.com) <==== ATTENTION
Azurewave Wireless LAN (Version: 1.00.0000 - RaLink)
Badoo Desktop (Version: 1.6.58.1220 - Badoo)
Battle.net (Version:  - Blizzard Entertainment)
Bison Webcam (Version: 7.96.701.12a - Bison Webcam)
Bonjour (Version: 1.0.106 - Apple Inc.)
CCleaner (Version: 2.35 - Piriform)
Command & Conquer Die ersten 10 Jahre (Version: 1.00.0000 - Electronic Arts)
Compatibility Pack für 2007 Office System (Version: 12.0.6612.1000 - Microsoft Corporation) <==== ATTENTION
Connect (Version: 1.0.0.1 - Adobe Systems Incorporated) Hidden
Corel MediaOne (Version: 2.00.0000 - Corel Corporation)
CorelDRAW Essential Edition 3 (Version:  - Corel Corporation)
CorelDRAW Essential Edition 3 (Version: 3.0 - Corel Corporation) Hidden
CyberLink MakeDisc (Version: 3.0.2601 - CyberLink Corp.)
CyberLink MediaShow (Version: 4.1.2318 - CyberLink Corp.)
CyberLink MediaShow (Version: 4.1.2318 - CyberLink Corp.) Hidden
CyberLink PhotoNow (Version: 1.1.5615 - CyberLink Corp.)
CyberLink PhotoNow (Version: 1.1.5615 - CyberLink Corp.) Hidden
CyberLink PowerDirector (Version: 7.0.2209b - CyberLink Corp.)
CyberLink PowerDirector (Version: 7.0.2209b - CyberLink Corp.) Hidden
CyberLink PowerDVD 8 (Version: 8.0.2217 - CyberLink Corp.)
CyberLink PowerDVD 8 (Version: 8.0.2217 - CyberLink Corp.) Hidden
CyberLink PowerProducer (Version: 5.1111 - CyberLink Corp.) <==== ATTENTION
CyberLink PowerProducer (Version: 5.1111 - CyberLink Corp.) Hidden <==== ATTENTION
CyberLink YouCam (Version: 2.0.2305 - CyberLink Corp.)
CyberLink YouCam (Version: 2.0.2305 - CyberLink Corp.) Hidden
DE (Version: 3.0 - Corel Corporation) Hidden
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (Version:  - Microsoft) <==== ATTENTION
Diablo II (Version:  - )
DVDVideoSoft Toolbar (Version:  - )
fbDownloader (HKCU Version: 1.0.0.0 - HTTO Group, Ltd.)
flash-Enhancer (Version: 2.1 - flash-Enhancer.com) <==== ATTENTION
Free Studio version 4.2 (Version:  - DVDVideoSoft Limited.)
FUJIFILM FinePixViewer S Ver.2.1 (Version: 2.1.0.3 - FUJIFILM Corporation)
Google Chrome (HKCU Version: 32.0.1700.76 - Google Inc.)
Google Desktop (Version: 5.9.1005.12335 - Google)
Google Earth (Version: 4.3.7284.3916 - Google)
Google Earth Plug-in (Version: 7.1.2.2041 - Google)
Google Toolbar for Internet Explorer (Version: 1.0.0 - Google Inc.) Hidden
Google Toolbar for Internet Explorer (Version: 7.5.4805.320 - Google Inc.)
Google Update Helper (Version: 1.3.22.3 - Google Inc.) Hidden
Hearthstone (Version:  - Blizzard Entertainment)
ICQ Toolbar (Version: 3.0.0 - ICQ)
ICQ7.2 (Version: 7.2 - ICQ)
IePluginService12.27.0.3326 (Version: 12.27.0.3326 - Cherished Technololgy LIMITED) <==== ATTENTION
iTunes (Version: 9.0.0.70 - Apple Inc.)
Java 7 Update 21 (Version: 7.0.210 - Oracle)
Java Auto Updater (Version: 2.1.9.5 - Sun Microsystems, Inc.) Hidden
kuler (Version: 2.0 - Adobe Systems Incorporated) Hidden
League of Legends (Version: 1.3 - Riot Games)
Lightspark 0.5.3-git (Version: 0.5.3-git - Lightspark Team)
MAESTIA Version 201101 (Version: 201101 - RocWorks)
Magic Workstation 0.94f (Version:  - Magic Technology)
McAfee Security Scan Plus (Version: 3.8.130.10 - McAfee, Inc.)
Microsoft .NET Framework 3.5 SP1 (Version:  - Microsoft Corporation)
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729 - Microsoft Corporation) Hidden
Microsoft Office 2010 Service Pack 1 (SP1) (Version:  - Microsoft) <==== ATTENTION
Microsoft Office 2010 Service Pack 1 (SP1) (Version:  - Microsoft) Hidden <==== ATTENTION
Microsoft Office Access MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden <==== ATTENTION
Microsoft Office Excel MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden <==== ATTENTION
Microsoft Office Groove MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden <==== ATTENTION
Microsoft Office InfoPath MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden <==== ATTENTION
Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden <==== ATTENTION
Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden <==== ATTENTION
Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden <==== ATTENTION
Microsoft Office PowerPoint Viewer 2007 (German) (Version: 12.0.6612.1000 - Microsoft Corporation) <==== ATTENTION
Microsoft Office Professional Plus 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) <==== ATTENTION
Microsoft Office Professional Plus 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden <==== ATTENTION
Microsoft Office Proof (English) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden <==== ATTENTION
Microsoft Office Proof (French) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden <==== ATTENTION
Microsoft Office Proof (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden <==== ATTENTION
Microsoft Office Proof (Italian) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden <==== ATTENTION
Microsoft Office Proofing (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden <==== ATTENTION
Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden <==== ATTENTION
Microsoft Office Shared MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden <==== ATTENTION
Microsoft Office Word MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden <==== ATTENTION
Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [DEU] (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Works (Version: 9.7.0621 - Microsoft Corporation)
Mobogenie (Version:  - Mobogenie.com) <==== ATTENTION
Mozilla Firefox 26.0 (x86 de) (Version: 26.0 - Mozilla)
Mozilla Maintenance Service (Version: 26.0 - Mozilla) <==== ATTENTION
MSXML 4.0 SP2 (KB936181) (Version: 4.20.9848.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB941833) (Version: 4.20.9849.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0 - Microsoft Corporation)
Nero 8 Essentials (Version: 8.3.124 - Nero AG)
neroxml (Version: 1.0.0 - Nero AG) Hidden
NVIDIA Drivers (Version:  - NVIDIA Corporation)
NVIDIA PhysX (Version: 9.09.0209 - NVIDIA Corporation)
Pando Media Booster (Version: 2.6.0.8 - Pando Networks Inc.)
PartyPoker.net (Version:  - PartyGaming.Net)
PC Connectivity Solution (Version: 8.15.0.0 - Nokia)
PDF Settings CS4 (Version: 9.0 - Adobe Systems Incorporated) Hidden
PdfEditor (32bit) (Version: 1.0 - PixelPlanet)
PDF-Viewer (Version: 2.5.207.0 - Tracker Software Products Ltd)
Photoshop Camera Raw (Version: 5.0 - Adobe Systems Incorporated) Hidden
Picasa 2 (Version: 2.0 - Google, Inc.)
PixelPlanet PdfPrinter 6 (32bit) (Version: 6.03.23 - PixelPlanet)
QuickTime (Version: 7.64.17.73 - Apple Inc.)
Realtek 8169 8168 8101E 8102E Ethernet Driver (Version: 1.00.0000 - Realtek)
Realtek High Definition Audio Driver (Version: 6.0.1.5730 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (Version: 6.0.6000.20111 - Realtek Semiconductor Corp.)
RegClean Pro (Version: 6.21 - Systweak Inc) <==== ATTENTION
Re-markit (Version:  - Re-markit Software)
Samsung CLP-310 Series (Version:  - Samsung Electronics CO.,LTD)
SAMSUNG Mobile Composite Device Software (Version:  - ) <==== ATTENTION
Samsung Mobile Modem Device Software (Version:  - ) <==== ATTENTION
SAMSUNG Mobile Modem Driver Set (Version:  - )
Samsung Mobile phone USB driver Software (Version:  - )
SAMSUNG Mobile USB Modem 1.0 Software (Version:  - )
SAMSUNG Mobile USB Modem Software (Version:  - )
Samsung New PC Studio (Version: 1.00.0000 - Samsung Electronics Co., Ltd.)
Samsung New PC Studio (Version: 1.00.0000 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Mobile Device Software (Version:  - ) <==== ATTENTION
SamsungConnectivityCableDriver (Version: 6.83.6.2.1 - Samsung)
Skype™ 6.11 (Version: 6.11.102 - Skype Technologies S.A.)
Software Version Updater (Version: 1.1.3.8 - ) <==== ATTENTION
Spelling Dictionaries Support For Adobe Reader 9 (Version: 9.0.0 - Adobe Systems Incorporated)
Suite Shared Configuration CS4 (Version: 1.0 - Adobe Systems Incorporated) Hidden
SupTab (Version: 1.1.1.0 - )
Synaptics Pointing Device Driver (Version: 11.1.7.0 - Synaptics) <==== ATTENTION
TeamViewer 8 (Version: 8.0.22298 - TeamViewer)
Tracker Toolbar Updater (HKCU Version: 1.2.3.30498 - Ask.com)
Uninstall 1.0.0.1 (Version:  - )
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1 - Microsoft Corporation)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (Version:  - Microsoft) <==== ATTENTION
Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2553065) (Version:  - Microsoft) <==== ATTENTION
Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition (Version:  - Microsoft) <==== ATTENTION
Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition (Version:  - Microsoft) <==== ATTENTION
Update for Microsoft Office 2010 (KB2566458) (Version:  - Microsoft) <==== ATTENTION
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (Version:  - Microsoft) <==== ATTENTION
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (Version:  - Microsoft) <==== ATTENTION
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (Version:  - Microsoft) <==== ATTENTION
Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition (Version:  - Microsoft) <==== ATTENTION
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (Version:  - Microsoft) <==== ATTENTION
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (Version:  - Microsoft) <==== ATTENTION
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (Version:  - Microsoft) <==== ATTENTION
Update for Microsoft Office 2010 (KB2767886) 32-Bit Edition (Version:  - Microsoft) <==== ATTENTION
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (Version:  - Microsoft) <==== ATTENTION
Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition (Version:  - Microsoft) <==== ATTENTION
Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition (Version:  - Microsoft) <==== ATTENTION
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (Version:  - Microsoft) <==== ATTENTION
Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2589371) 32-Bit Edition (Version:  - Microsoft) <==== ATTENTION
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Word 2010 (KB2837593) 32-Bit Edition (Version:  - Microsoft)
Update Manager (Version: 4.60 - Corel Corporation) Hidden
ValueApps (HKCU Version: 1.3.1.1 - Conduit) <==== ATTENTION
VCRedistSetup (Version: 1.0.0 - Nero AG) Hidden
VLC media player 1.1.3 (Version: 1.1.3 - VideoLAN)
Windows Live Anmelde-Assistent (Version: 5.000.818.6 - Microsoft Corporation)
Windows Live Fotogalerie (Version: 12.0.1347.0718 - Microsoft Corporation)
Windows Live installer (Version: 12.0.1471.1025 - Microsoft Corporation)
Windows Live Mail (Version: 12.0.1606.1023 - Microsoft Corporation)
Windows Live Messenger (Version: 8.5.1302.1018 - Microsoft Corporation)
Windows Live Writer (Version: 12.0.1370.0325 - Microsoft Corporation)
Windows-Treiberpaket - Nokia pccsmcfd  (10/12/2007 6.85.4.0) (Version: 10/12/2007 6.85.4.0 - Nokia)
WPM17.8.0.3325 (Version: 17.8.0.3325 - Cherished Technololgy LIMITED) <==== ATTENTION
X10 Hardware(TM) (Version:  - )
Yahoo! Toolbar (Version:  - )

==================== Restore Points  =========================

29-11-2013 19:06:08 Windows Update
03-12-2013 06:32:21 Windows Update
05-12-2013 10:46:41 Geplanter Prüfpunkt
06-12-2013 11:50:02 Windows Update
11-12-2013 00:15:08 Windows Update
11-12-2013 19:53:57 Geplanter Prüfpunkt
12-12-2013 02:00:46 Windows Update
14-12-2013 07:31:14 Windows Update
17-12-2013 11:58:15 Windows Update
20-12-2013 22:23:49 Windows Update
24-12-2013 07:24:15 Windows Update
27-12-2013 14:45:45 Windows Update
31-12-2013 10:31:08 Windows Update
03-01-2014 21:22:08 Windows Update
07-01-2014 06:38:08 Windows Update
10-01-2014 12:12:57 Windows Update
14-01-2014 17:31:21 Windows Update
16-01-2014 02:00:23 Windows Update
17-01-2014 22:40:38 Windows Update
21-01-2014 22:12:16 Windows Update
24-01-2014 06:36:13 Windows Update
25-01-2014 18:24:41 RegClean Pro Sa, Jan 25, 14  19:24
25-01-2014 21:19:02 Avira EU-Cleaner - 25.01.2014 22:18

==================== Hosts content: ==========================

2006-11-02 11:23 - 2006-09-18 22:41 - 00000761 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost
::1             localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {1308A10A-555E-447C-857C-A59A1B58552A} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-298663874-1514575747-3442136624-1000UA => C:\Users\ANDREAS\AppData\Local\Google\Update\GoogleUpdate.exe [2011-06-02] (Google Inc.)
Task: {18016387-E742-41A4-9460-E1302CAE5CD5} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2009-06-08] (Google Inc.)
Task: {1CC81347-6204-4B83-900C-01E02F50F067} - System32\Tasks\Microsoft\Windows\MobilePC\TMM
Task: {22CB1AA0-79B8-4E03-9BC1-65F92F0617F2} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-298663874-1514575747-3442136624-1000Core => C:\Users\ANDREAS\AppData\Local\Google\Update\GoogleUpdate.exe [2011-06-02] (Google Inc.)
Task: {2904E6F1-F241-4D7E-8EA2-F3CA6A52CDFB} - System32\Tasks\RegClean Pro_UPDATES => C:\Program Files\RegClean Pro\RegCleanPro.exe [2014-01-21] (Systweak Inc) <==== ATTENTION
Task: {29FC0C2B-FAE9-47B9-8217-E92268AE7AFE} - System32\Tasks\AmiUpdXp => C:\Users\ANDREAS\AppData\Local\SwvUpdater\Updater.exe [2014-01-25] (Amonetizé Ltd) <==== ATTENTION
Task: {2FD3134D-4D16-4867-94C6-8017981981BA} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-10] (Adobe Systems Incorporated)
Task: {320124A7-D70F-41DE-A9D1-D5E8E19D5D91} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI
Task: {3BCDF251-CA5C-4045-A1FC-8FCEF9FBDC93} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages
Task: {44980BEE-7809-44A9-AC24-D6E578A3B7DF} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\system32\RacAgent.exe [2008-01-21] (Microsoft Corporation)
Task: {6D136D8F-E0AC-45DC-807A-65553A08B0BE} - System32\Tasks\Re-markit Update => C:\Program Files\Re-markit\ReMarkit_up.exe [2014-01-25] () <==== ATTENTION
Task: {7040CAAD-33A0-4CF7-8981-FA1F5E4EDD6E} - System32\Tasks\RegClean Pro_DEFAULT => C:\Program Files\RegClean Pro\RegCleanPro.exe [2014-01-21] (Systweak Inc) <==== ATTENTION
Task: {82C55255-67E4-4E26-A354-165D2CB4E4B6} - System32\Tasks\RegClean Pro => C:\Program Files\RegClean Pro\RegCleanPro.exe [2014-01-21] (Systweak Inc) <==== ATTENTION
Task: {86317127-72FA-44EB-8B39-B573E4A3C5E7} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2008-07-30] (Apple Inc.)
Task: {CF28881A-2BFC-4E3E-8F5A-BD7FC457C6C1} - System32\Tasks\Scheduled Update for Ask Toolbar => C:\Program Files\Ask.com\UpdateTask.exe [2012-11-09] ()
Task: {DE37644A-D11A-484D-A4F0-6005B74FC832} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2009-06-08] (Google Inc.)
Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs [2008-01-21] ()
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AmiUpdXp.job => C:\Users\ANDREAS\AppData\Local\SwvUpdater\Updater.exe <==== ATTENTION
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-298663874-1514575747-3442136624-1000Core.job => C:\Users\ANDREAS\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-298663874-1514575747-3442136624-1000UA.job => C:\Users\ANDREAS\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Re-markit Update.job => C:\Program Files\Re-markit\ReMarkit_up.exe <==== ATTENTION
Task: C:\Windows\Tasks\RegClean Pro_DEFAULT.job => C:\Program Files\RegClean Pro\RegCleanPro.exe <==== ATTENTION
Task: C:\Windows\Tasks\RegClean Pro_UPDATES.job => C:\Program Files\RegClean Pro\RegCleanPro.exe <==== ATTENTION
Task: C:\Windows\Tasks\User_Feed_Synchronization-{103B65BD-4798-4CA0-9487-EB211B637804}.job => C:\Windows\system32\msfeedssync.exe

==================== Loaded Modules (whitelisted) =============

2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2014-01-25 11:43 - 2014-01-09 08:50 - 00061440 _____ () C:\Program Files\Mobogenie\Device.dll
2014-01-25 11:43 - 2014-01-09 08:51 - 00471040 _____ () C:\Program Files\Mobogenie\DCR.dll
2014-01-16 03:57 - 2014-01-11 11:29 - 04055320 _____ () C:\Users\ANDREAS\AppData\Local\Google\Chrome\Application\32.0.1700.76\pdf.dll
2014-01-16 03:57 - 2014-01-11 11:29 - 00399640 _____ () C:\Users\ANDREAS\AppData\Local\Google\Chrome\Application\32.0.1700.76\ppGoogleNaClPluginChrome.dll
2014-01-16 03:57 - 2014-01-11 11:28 - 01634584 _____ () C:\Users\ANDREAS\AppData\Local\Google\Chrome\Application\32.0.1700.76\ffmpegsumo.dll
2014-01-16 03:57 - 2014-01-11 11:29 - 13615896 _____ () C:\Users\ANDREAS\AppData\Local\Google\Chrome\Application\32.0.1700.76\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (01/25/2014 11:10:11 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/25/2014 11:09:29 PM) (Source: Application Error) (User: )
Description: Fehlerhafte Anwendung AssistantServices.exe, Version 0.0.0.0, Zeitstempel 0x4e55b0e2, fehlerhaftes Modul AssistantServices.exe, Version 0.0.0.0, Zeitstempel 0x4e55b0e2, Ausnahmecode 0xc0000417, Fehleroffset 0x0000f4aa,
Prozess-ID 0xd38, Anwendungsstartzeit AssistantServices.exe0.

Error: (01/25/2014 10:18:57 PM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {8c4123c4-bc91-489a-8c33-739dec5b4351}

Error: (01/25/2014 08:06:39 PM) (Source: Application Error) (User: )
Description: Fehlerhafte Anwendung plugin-container.exe, Version 26.0.0.5087, Zeitstempel 0x52a0d293, fehlerhaftes Modul mozalloc.dll, Version 26.0.0.5087, Zeitstempel 0x52a0af28, Ausnahmecode 0x80000003, Fehleroffset 0x0000119c,
Prozess-ID 0x1a1c, Anwendungsstartzeit plugin-container.exe0.

Error: (01/25/2014 07:24:40 PM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {8c4123c4-bc91-489a-8c33-739dec5b4351}

Error: (01/25/2014 11:43:12 AM) (Source: Windows Search Service) (User: )
Description: Eintrag <C:\USERS\ANDREAS\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\YKQB8VJ2.DEFAULT\CACHE\9> in der Hash-Zuordnung kann nicht aktualisiert werden.

Kontext:  Anwendung, SystemIndex Katalog


Details:
	Ein an das System angeschlossenes Gerät funktioniert nicht.   (0x8007001f)

Error: (01/25/2014 11:43:12 AM) (Source: Windows Search Service) (User: )
Description: Eintrag <C:\USERS\ANDREAS\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\YKQB8VJ2.DEFAULT\CACHE\9> in der Hash-Zuordnung kann nicht aktualisiert werden.

Kontext:  Anwendung, SystemIndex Katalog


Details:
	Ein an das System angeschlossenes Gerät funktioniert nicht.   (0x8007001f)

Error: (01/25/2014 11:43:07 AM) (Source: Windows Search Service) (User: )
Description: Eintrag <C:\USERS\ANDREAS\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\YKQB8VJ2.DEFAULT\CACHE\8> in der Hash-Zuordnung kann nicht aktualisiert werden.

Kontext:  Anwendung, SystemIndex Katalog


Details:
	Ein an das System angeschlossenes Gerät funktioniert nicht.   (0x8007001f)

Error: (01/25/2014 11:43:07 AM) (Source: Windows Search Service) (User: )
Description: Eintrag <C:\USERS\ANDREAS\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\YKQB8VJ2.DEFAULT\CACHE\8> in der Hash-Zuordnung kann nicht aktualisiert werden.

Kontext:  Anwendung, SystemIndex Katalog


Details:
	Ein an das System angeschlossenes Gerät funktioniert nicht.   (0x8007001f)

Error: (01/25/2014 11:43:05 AM) (Source: Windows Search Service) (User: )
Description: Eintrag <C:\USERS\ANDREAS\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\YKQB8VJ2.DEFAULT\CACHE\7> in der Hash-Zuordnung kann nicht aktualisiert werden.

Kontext:  Anwendung, SystemIndex Katalog


Details:
	Ein an das System angeschlossenes Gerät funktioniert nicht.   (0x8007001f)


System errors:
=============
Error: (01/25/2014 11:10:12 PM) (Source: Service Control Manager) (User: )
Description: UI Assistant Service%%1053

Error: (01/25/2014 11:10:12 PM) (Source: Service Control Manager) (User: )
Description: 30000UI Assistant Service

Error: (01/25/2014 11:10:12 PM) (Source: Service Control Manager) (User: )
Description: DgiVecp%%2

Error: (01/25/2014 11:10:12 PM) (Source: Service Control Manager) (User: )
Description: Parallel port driver%%1058

Error: (01/25/2014 11:08:47 PM) (Source: HTTP) (User: )
Description: \Device\Http\ReqQueueKerberos

Error: (01/25/2014 11:44:09 AM) (Source: Service Control Manager) (User: )
Description: MgAssist Service

Error: (01/23/2014 03:18:44 AM) (Source: Service Control Manager) (User: )
Description: UI Assistant Service%%1053

Error: (01/23/2014 03:18:44 AM) (Source: Service Control Manager) (User: )
Description: 30000UI Assistant Service

Error: (01/23/2014 03:18:44 AM) (Source: Service Control Manager) (User: )
Description: DgiVecp%%2

Error: (01/23/2014 03:18:44 AM) (Source: Service Control Manager) (User: )
Description: Parallel port driver%%1058


Microsoft Office Sessions:
=========================
Error: (01/25/2014 11:10:11 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/25/2014 11:09:29 PM) (Source: Application Error)(User: )
Description: AssistantServices.exe0.0.0.04e55b0e2AssistantServices.exe0.0.0.04e55b0e2c00004170000f4aad3801cf1a1a14d87f9d

Error: (01/25/2014 10:18:57 PM) (Source: VSS)(User: )
Description: 0x80070005

Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {8c4123c4-bc91-489a-8c33-739dec5b4351}

Error: (01/25/2014 08:06:39 PM) (Source: Application Error)(User: )
Description: plugin-container.exe26.0.0.508752a0d293mozalloc.dll26.0.0.508752a0af28800000030000119c1a1c01cf19fadf8d3e8e

Error: (01/25/2014 07:24:40 PM) (Source: VSS)(User: )
Description: 0x80070005

Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {8c4123c4-bc91-489a-8c33-739dec5b4351}

Error: (01/25/2014 11:43:12 AM) (Source: Windows Search Service)(User: )
Description: Kontext:  Anwendung, SystemIndex Katalog


Details:
	Ein an das System angeschlossenes Gerät funktioniert nicht.   (0x8007001f)
C:\USERS\ANDREAS\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\YKQB8VJ2.DEFAULT\CACHE\9

Error: (01/25/2014 11:43:12 AM) (Source: Windows Search Service)(User: )
Description: Kontext:  Anwendung, SystemIndex Katalog


Details:
	Ein an das System angeschlossenes Gerät funktioniert nicht.   (0x8007001f)
C:\USERS\ANDREAS\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\YKQB8VJ2.DEFAULT\CACHE\9

Error: (01/25/2014 11:43:07 AM) (Source: Windows Search Service)(User: )
Description: Kontext:  Anwendung, SystemIndex Katalog


Details:
	Ein an das System angeschlossenes Gerät funktioniert nicht.   (0x8007001f)
C:\USERS\ANDREAS\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\YKQB8VJ2.DEFAULT\CACHE\8

Error: (01/25/2014 11:43:07 AM) (Source: Windows Search Service)(User: )
Description: Kontext:  Anwendung, SystemIndex Katalog


Details:
	Ein an das System angeschlossenes Gerät funktioniert nicht.   (0x8007001f)
C:\USERS\ANDREAS\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\YKQB8VJ2.DEFAULT\CACHE\8

Error: (01/25/2014 11:43:05 AM) (Source: Windows Search Service)(User: )
Description: Kontext:  Anwendung, SystemIndex Katalog


Details:
	Ein an das System angeschlossenes Gerät funktioniert nicht.   (0x8007001f)
C:\USERS\ANDREAS\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\YKQB8VJ2.DEFAULT\CACHE\7


CodeIntegrity Errors:
===================================
  Date: 2014-01-25 23:32:57.047
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-01-25 23:32:56.602
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-01-25 23:32:56.263
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-01-25 23:32:55.920
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-01-25 23:32:55.542
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-01-25 23:32:55.193
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-01-25 23:32:54.795
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-01-25 23:32:54.348
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-03-17 00:46:12.660
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\nvd3dum.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-03-17 00:46:12.386
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\nvd3dum.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 64%
Total physical RAM: 3065.95 MB
Available physical RAM: 1078.14 MB
Total Pagefile: 6348.2 MB
Available Pagefile: 4135.76 MB
Total Virtual: 2047.88 MB
Available Virtual: 1898.19 MB

==================== Drives ================================

Drive c: (BOOT) (Fixed) (Total:278.07 GB) (Free:42.96 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (RECOVER) (Fixed) (Total:20 GB) (Free:8.95 GB) FAT32
Drive e: (DE10J) (CDROM) (Total:7.01 GB) (Free:0 GB) UDF

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 298 GB) (Disk ID: 10E38D74)
Partition 1: (Active) - (Size=278 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=20 GB) - (Type=0C)

==================== End Of Log ============================
         

--- --- ---

Du hast Adobe CS4 installiert, ist das ein gewerblich genutzter Rechner?

Habe auf filepony.com auch aus Versehen einen Zip extractor runtergeladen ich vermute der gehört eigentlich nicht auf diese Seite. Habe auf eine grüne Schaltfläche geklickt wo download stand. Also da wo ich das farbar tool herunterladen konnte.War das auch irgendeine Malware?

Musst halt den richtigen Downloadbutton klicken und nicht auf Werbung.
Was ist mit meiner Frage nach CS4 bzw gewerblich genutztem System?

Ne das hatte oder wollte ich mal vor ein Paar Jahren für die, bzw. von der Schule aus Installieren. Hat aber nicht geklappt es zu öffnen.Aber das war schon 3 Jahre her sollte also nichts mit dem Problem zu tun haben oder? Ist das nicht erlaubt?

Also habe es nicht gewerblich benutzt bzw. garnicht benutzt weil es nicht funktioniert hat.

Malwarebytes Anti-Rootkit (MBAR)

Downloade dir bitte Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.

• Starte bitte die mbar.exe.
• Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
• Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
• Klicke auf den CleanUp Button und erlaube den Neustart.
• Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
• Nach dem Neustart starte die mbar.exe erneut.
• Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.

Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers

Habe soeben das Cleanup gemacht es wurden 4 Fehler erkannt alle hatten den namen lollipop aber der Neustart ist ausgeblieben, wurde auch nicht danach gefragt, soll ich es ein weiteres Mal versuchen oder?

Scan options disabled:
Objects scanned: 214207
Time elapsed: 22 minute(s), 22 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 1
C:\Users\ANDREAS\AppData\Local\Lollipop (Adware.LolliPop.IT) -> Delete on reboot.

Files Detected: 3
C:\Users\ANDREAS\AppData\Local\Lollipop\lollipop.lpd (Adware.LolliPop.IT) -> Delete on reboot.
C:\Users\ANDREAS\AppData\Local\Lollipop\lollipop_cfg.lpd (Adware.LolliPop.IT) -> Delete on reboot.
C:\Users\ANDREAS\AppData\Local\Lollipop\lollipop_ps.lpd (Adware.LolliPop.IT) -> Delete on reboot.

Physical Sectors Detected: 0
(No malicious items detected)

(end)

Log ist unvollständig und nicht in CODE-Tags
Du hast die Anleitung komplett gelesen?

Habe den Scan jetzt nochmal durchgeführt habe beim ersten mal vergessen es upzudaten.
Diesmmal wurden aber keine Fehler erkannt.

Malwarebytes Anti-Rootkit BETA 1.07.0.1009
www.malwarebytes.org

Database version: v2014.01.25.11

Windows Vista Service Pack 1 x86 NTFS
Internet Explorer 7.0.6001.18000
ANDREAS :: ANDREAS-PC [administrator]

26.01.2014 01:53:14
mbar-log-2014-01-26 (01-53-14).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled:
Objects scanned: 222245
Time elapsed: 45 minute(s), 28 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)

Heute niemand da?

Schon wieder nicht in CODE-Tags gepostet. Wurde doch haarklein erklärt wie das geht. Und ja, gestern am Sonntag hab ich mir mal eine kurze TB-Pause genehmigt. Hab mal gehört, dass viele sonntags nicht arbeiten

Adware/Junkware/Toolbars entfernen


1. Schritt: adwCleaner

Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

2. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

• Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
• Drücke eine beliebige Taste, um das Tool zu starten.
• Je nach System kann der Scan eine Weile dauern.
• Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
• Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

3. Schritt: Frisches Log mit FRST

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Hab ich natürlich Verständnis für das du dir mal einen Tag Ruhe gönnst.
Leider verstehe ich nicht wirklich was genau ich falsch gemacht habe bzw. was code Tags sind.
Habe mir die Anleitung nochmal genau durchgelesen

vielleicht liegt es daran dass ich die Datei nicht entpackt habe bzw. nicht weiß wie das geht genauso mit dem Extrahieren, habe das Programm mit doppelklick gestartet ein Update gemacht
auf nest geklickt und auf den Cleanup Button geklickt wurde aber nicht nach einem Neustart gefragt, vielleicht bist du ja so lieb und erklärst mir genau was ich Falsch gemacht habe, oder soll ich einfach mit den Nächsten drei Schritten fortfahren, also mit den anderen Programmen?

Wurde in Beitrag #2 erklärt. Siehe auch http://www.trojaner-board.de/137229-...ml#post1095079

hhm der adw cleaner scheint bei mir nicht zu funktionieren er sucht solange bis ca.90% des balkens geladen sind dort steht analysing Browser nun kommt immer nach ca. 10 min. keine Rückmeldung hab es schon 3 Mal probiert. Soll ich mit dem Zweiten Schritt fortfahren? Oder was tun?